Can an injection attack be pulled off using an HTML element's style attribute?

Question

I have a javascript function (with some PHP) on my website that will add an element to the DOM. The element will be styled via the element\'s style attribute. A